meta-ladyn[.]pages[.]dev

This domain, meta-ladyn.pages.dev, was registered on February 21 2026 through Cloudflare, Inc. and resolves to the Cloudflare edge address 172.66.47.125, which is announced by AS13335 and located in the United States. The site serves an HTTP 403 response and presents the page title “Suspected phishing site | Cloudflare”. TLS is provided by a Google Trust Services / WE1 certificate and the connection enforces HSTS and HTTP/3, confirming the use of modern Cloudflare infrastructure. Google Safe Browsing has flagged the domain for social‑engineering, and PhishDestroy lists it as blocked.

VirusTotal reports that 16 of 93 security vendors have flagged the domain, and it appears on one external blocklist. The Gridinsoft trust score is 0 / 100, indicating a lack of trust. The domain is currently offline, which may be the result of takedown actions or automated blocklist removal.

Evidence confirms credential‑phishing activity, but the exact payload or targeted brand is not disclosed in the available data. Defenders should continue to block the domain at DNS and proxy layers, monitor for any resurrection on other Cloudflare‑owned subdomains, and consider sharing the indicator set with threat‑intelligence feeds. Additional analysis is required to determine whether the site was used to harvest specific credentials or to host malicious redirects, as the current snapshot contains only the generic phishing page title and infrastructure metadata.